Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: 25CEeJtD5EymxgIKOuZLf8pAlQbp9CxHgkt7xz2jfT0=
Subject key identifier: C9:7C:67:64:CF:7D:5A:C0:01:BD:43:CA:AD:AD:D4:00:A1:4B:B1:2C
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 01967A5700BEB44BC359CE68295D4E4FCD1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 0BF6
Signing time: Mon 28 Apr 2025 03:00:44 +0000
Manifest this update: Mon 28 Apr 2025 03:00:44 +0000
Manifest next update: Tue 29 Apr 2025 03:00:44 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: /tBf4OJnS4A0LwshSwHkYTD8wFScqFbrxLxe3nC1qv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:00:be:b4:4b:c3:59:ce:68:29:5d:4e:4f:cd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Apr 28 03:00:44 2025 GMT
Not After : Apr 29 03:00:44 2025 GMT
Subject: CN=c97c6764cf7d5ac001bd43caadadd400a14bb12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:ff:bb:59:ee:72:df:5d:cd:41:f0:4f:04:
7e:aa:11:1b:12:1a:59:a9:6d:0c:ee:2e:50:30:14:
3a:47:60:ab:49:41:a6:53:71:51:5d:21:07:01:9d:
d3:72:d3:b2:7f:85:dd:9c:b8:b6:13:8f:17:6b:3d:
9e:2a:b3:67:5d:e9:22:84:79:93:11:06:51:b2:88:
3e:96:49:11:01:4c:a4:67:5f:d4:1c:af:07:ff:69:
dc:00:68:d8:66:fc:79:10:86:dd:e0:c4:46:41:38:
57:ca:fe:12:3f:7b:de:96:51:a9:c5:75:4b:aa:28:
b1:1c:ed:72:da:00:48:41:0f:a5:b3:0d:6f:bf:fd:
6f:cd:e3:a2:db:21:4f:b2:aa:80:67:f8:85:ce:e6:
3c:a5:91:78:65:25:48:de:31:a7:dc:36:19:02:5b:
e0:38:8d:e0:87:03:04:53:ee:d8:d0:87:25:b7:79:
8f:51:70:77:cc:08:51:5a:20:6b:cd:d2:5c:0d:82:
70:f9:c6:f6:10:ed:f6:25:b9:81:9b:86:3b:ab:b4:
74:c0:dd:a8:a9:79:89:88:1f:09:cd:43:12:24:0e:
b1:96:99:8a:40:ee:e6:55:dd:1a:5f:0e:8a:ad:ff:
24:95:a6:b4:7b:b9:eb:01:c2:ec:ae:d9:00:24:60:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7C:67:64:CF:7D:5A:C0:01:BD:43:CA:AD:AD:D4:00:A1:4B:B1:2C
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1f:76:cb:fe:c2:7a:69:a5:47:93:5b:7a:56:18:0e:a3:c8:
51:69:16:26:38:6c:fe:63:14:46:13:a1:7f:c3:94:03:77:f3:
e8:9b:e0:fc:7e:53:72:5d:2a:33:e2:fa:ef:31:1e:8c:1a:87:
69:10:cf:d1:ff:0a:84:12:25:16:87:be:0c:14:72:7c:5f:30:
3e:ae:77:cf:05:12:78:0a:f6:83:0c:aa:40:bb:9d:ea:4c:2a:
bd:4d:34:ae:aa:f1:09:7f:9b:b3:3f:c2:ef:81:51:14:a3:1a:
b7:95:aa:a3:e0:0b:77:f8:9e:ee:45:68:49:29:a6:1d:21:42:
e0:8d:ea:47:b7:a7:ba:a1:8d:9e:d1:b0:34:10:86:a1:14:66:
18:65:ee:3a:ee:19:37:31:7b:de:fe:2b:c9:55:26:83:ca:95:
d2:e7:6d:c6:98:d7:ff:1b:e5:38:e4:a6:3a:10:72:98:46:6e:
88:95:4e:4c:7e:28:9b:a1:60:c2:c1:60:22:13:01:75:05:ba:
6d:34:fb:3e:5a:07:25:88:5e:dd:b8:df:8c:86:51:55:f0:98:
9c:66:46:4e:82:05:20:8f:1d:ab:6c:86:6b:d3:51:26:7e:e3:
57:0c:c6:cc:45:f1:57:b2:fc:28:38:a9:dd:89:85:89:bf:fa:
6b:49:bf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:32:49 2025 by rpki-client